[Snyk] Upgrade three from 0.120.1 to 0.136.0 #66

snyk-bot · 2022-01-15T11:35:19Z

Snyk has created this PR to upgrade three from 0.120.1 to 0.136.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 27 versions ahead of your current version.
The recommended version was released 22 days ago, on 2021-12-24.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-THREE-1064931	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: three

0.136.0 - 2021-12-24
0.135.0 - 2021-11-26
0.134.0 - 2021-10-28
0.133.1 - 2021-10-04
0.133.0 - 2021-09-30
0.132.2 - 2021-08-27
0.132.1 - 2021-08-27
0.132.0 - 2021-08-26
0.131.3 - 2021-08-04
0.131.2 - 2021-08-03
0.131.1 - 2021-07-30
0.131.0 - 2021-07-29
0.130.1 - 2021-07-05
0.130.0 - 2021-06-30
0.129.0 - 2021-05-27
0.128.0 - 2021-04-23
0.127.0 - 2021-03-31
0.126.1 - 2021-03-03
0.126.0 - 2021-02-24
0.125.2 - 2021-01-29
0.125.1 - 2021-01-27
0.125.0 - 2021-01-27
0.124.0 - 2020-12-24
0.123.0 - 2020-11-25
0.122.0 - 2020-10-28
0.121.1 - 2020-09-30
0.121.0 - 2020-09-30
0.120.1 - 2020-08-30

from three GitHub release notes

Commit messages

Package name: three

1a241ef r136
cf5fe46 Updated builds.
9117a63 Updated examples builds.
e2bdc75 GLTFLoader: Avoid using ImageBitmap in Safari. (#23086)
5340bf3 Editor: Add support for pic extension.
9f56628 Color: Remove gamma-related methods (#23082)
192e1ab added reference (#23081)
5c18248 Initialize parseScope.groupObject even when !LDRAW_ORG is not specified (#23076)
a45e0d1 Updated examples builds.
761f2f4 Updated builds.
820a605 ShaderChunk: Clearer sheen code. https://github.com/added IBL Sheen support mrdoob/three.js#23069#issuecomment-999982264
0e21088 WebGLRenderer: Remove gammaFactor and GammaEncoding. (#23080)
4ea1a19 Update ArcballControls.js
009c4f8 SkinnedMesh: Clarify clone() method. (#23079)
52c91ba Placeholder: Add user-select: none (#23075)
57c9a57 Examples: Updated webgl_geometry_teapot screenshot.
08b4975 Examples: Simplified webgl_geometry_teapot.
0090643 Clean up.
5eedcdb Clean up.
0b035d0 Add a placeholder to the examples (#23045)
0e53dfb Clean up.
3e678a3 Updated examples builds.
80afa23 Improved webgl_loader_gltf_sheen example.
a759644 Editor: Clean up.